@KaranVaidya6 > gained a foothold in an internal agentic tool
> The attacker demonstrated deep knowledge of our API surface and internal architecture
The call is coming from inside the house
English
me, an internetual
9.7K posts
me, an internetual
@grrowl
i make cool shit on the internet • • • 🌈 🇦🇺 • • • https://t.co/kbMT4MulaG
Melbourne, AU Katılım Kasım 2007
1.4K Takip Edilen448 Takipçiler
@TylerCLaprade @mattlam_ Too bad, it’s on my machine, it’s mine now.
English
i'm sad and confused why claude code would remove /simplify. /simplify is the most useful built in skill, and as it's name, it's simple.
Instead now it's going to be /code-review with different effort levels but:
- agents are not good enough to write clean code yet, and /simplify still helps majorly
- sometimes you want to simplify your code without a full on review
- /simplify doesn't need effort level, additional prompt, or comment replies.
@bcherny thoughts?
Claude Code Changelog@ClaudeCodeLog
Claude Code 2.1.147 has been released. 35 CLI changes Highlights: • Workflow tool added for deterministic multi-agent orchestration; off by default, set CLAUDE_CODE_WORKFLOWS=1 • /simplify→/code-review renamed; flags correctness bugs at effort level, can post inline GitHub PR comments • REPL and Workflow sandboxes hardened against prototype-pollution and thenable escapes, cutting escape risk Complete details in thread ↓
English
@advait3000 @threepointone Strange model where 1 agent = 1 DO, but the fundamentals are very sound
English
@threepointone cf needs to promote the Agent class to be the default thing over raw DOs. Scheduling, state management, queueing, idempotency, keepAlive are all such great features.
90% of DO impls would benefit from these utilities.
It's strange to even call it Agent honestly.
English
@tenobrus @almmaasoglu Bro that’s my LinkedIn profile banner lol
English
me, an internetual retweetledi
FWIW, I think the best managers are the ones who are the best ICs as well. The rest of the team is forced to level up as a result and the manager never loses touch with the tech/product/community. I never really believed in the role of just "people managers".
English
@snoopy_dot_jpg If only you could collab without a Claude Team account it might be useful beyond Generate + Export
English
claude design? do you mean the internal prompt gathering portal ant shipped to gather some training data?
judy@letjudycook
old enough to remember Claude Design
English
@the_thagomizer Waiting for “antigravity is now gemini dev” and “Gemini cli is shutting down in favour of google AI”
English
Antigravity is Google’s AI tool for devs and builders.
Gemini CLI@geminicli
Transitioning Gemini CLI users to Antigravity CLI We are unifying our efforts around a single harness and platform, Google Antigravity with four distinct surfaces: • Antigravity 2.0 • Antigravity CLI • Antigravity SDK • Antigravity IDE This will allow us to move faster and give you a streamlined experience wherever you do your best work. Rebuilt in Go for speed, Antigravity CLI is available today and brings robust multi-agent orchestration and asynchronous workflows to your terminal. Important things to know: 1. If you are using Gemini CLI through your Google one account (Google AI Pro or AI Ultra) or through Gemini Code Assist for individuals (free offering) we will be helping you migrate your workflows over the next 30 days. 2. No action required for Enterprise users. Enterprise plans and API keys will continue to be supported in Gemini CLI. Read the full details in our blog post → goo.gle/4eWkUgK
English
people of pi.dev. i'm removing all tools from pi witbout replacement.
get creative.
max.berlin@maxjendrall
@YoniBraslaver @badlogicgames oh god, please don't switch out all read, write, edit, bash tools for code mode. Would be in the spirit of extensibility tho hahaha "pi has 1 tool. deal with it"
English
me, an internetual retweetledi
🚨 How the TanStack npm attack actually happened:
1. Attacker opened a normal-looking pull request (#7378) on the TanStack repo.
2. GitHub automatically ran CI tests on that PR.
3. Code inside the PR stole the workflow's GitHub Actions Cache write token during the test run.
4. The attacker used that token to plant poisoned files in the shared build cache. The PR could be closed afterwards. The poisoned cache stays.
5. The official release workflow later pulled from the cache, baked the malicious files into the build, and signed and published 84 malicious package versions to npm.
Adnan Khan@adnanthekhan
This attack leveraged GitHub Actions Cache Poisoning. Payload deployed here: github.com/TanStack/route… It looks like it detonated here: #step:26:2" target="_blank" rel="nofollow noopener">github.com/TanStack/route…
English
if your agent doesn't write design specs like this your ngmi
English
@rettooooo @adamghowiba I suppose you manually prompt one agent by hand each time?
English
JP Morgan's investment research team just shared exactly how they built their multi-agent system "Ask David", and it's the same architecture pattern showing up everywhere:
- supervisor agent orchestrates
- specialized subagents handle retrieval, structured data, analytics
- LLM-as-judge reflection node before the answer ships
- human-in-the-loop for the last accuracy gap
worth watching for anyone building:
English
Someone please build a wrapper on AWS! Most confusing interface ever.
English
What are you guys using for automated code reviews? Cursor's gracious bugbot trial ran out and Copilot code reviews leave something to be desired
English
@alexkehr Hyperslop is the name of the game. They are chasing PR, not DAU
English
me, an internetual retweetledi
According to 23andme I have that gene that makes cilantro taste like soap, but I love cilantro. Thus I can conclude that disliking cilantro is a moral failing
English
In May of 2014 a woman confessed to me that she was the sole witness to a murder committed by a high ranking music exec. She showed me muddy clothes from assisting in the burial of the body. One month later, “All About That Bass” hit the radio waves. I recognized her instantly
Trainor Crave@TrainorCrave
Meghan Trainor has released the Music Video for Shimmer
English
@threepointone Must be nice to be building agents for anything but coding (it’s me)
English
now that the basics are falling into place, the thing I'm really struggling with is UI. every "coding agent" kinda sucks on laptop/mobile, and everyone punts on it by just hiding the details "you don't need to see the code anymore". balderdash. we need to rethink it all.
sunil pai@threepointone
working on subagents / agents-as-tools for single threads, and it's so very satisfying with Think because it's just nested chat all the way down, persistence/streaming/resumption all ootb landing this week
English
You never really stop learning CSS
Alex Carpenter@alexcarp_me
Using scroll-padding CSS property to ensure selected item stays visible above the scroll fades.
English